Method for verifying completeness of platform, network device and network system
A technology for integrity verification and platform integrity, applied in safety devices, electrical components, wireless communications, etc., can solve problems such as time extension, low efficiency, and failure to repair in time, and achieve the effect of improving efficiency
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0040] Such as figure 1 As shown, the embodiment of the present invention provides a method for platform integrity verification, which may include:
[0041] Step S102, receiving information from the access device, the information including the integrity metric value information and partial integrity verification results obtained by the access device according to the integrity verification strategy;
[0042]The subject of execution of this step can be a network-side device, specifically a SeGW (Security Gateway), or an independent verification entity network element, such as AAAserver (AAA server), HLR (Home Location Register), HSS (Home Subscriber Server), OAM server, AHR (Access Point homeregister), MME (mobility management entity), etc., which store integrity reference values, perform remote verification, issue policies, etc., and perform access control or service access control according to the judgment results. The access device may be: a home base station, or an eNB in ...
Embodiment 2
[0055] Such as figure 2 As shown, the embodiment of the present invention provides a method for platform integrity verification, which may include:
[0056] Step S202, collecting local integrity measurement value information according to the integrity verification strategy;
[0057] The execution subject of this step may be an access device, more specifically, may be a security unit, such as TrE or TPM.
[0058] The integrity verification policy can be issued by the network side device to the access device, or can be stored on the access device, and sent to the access device when the network side device is updated periodically or triggered by an event.
[0059] Step S204, perform integrity verification on some local components according to the integrity verification policy, and obtain partial integrity verification results;
[0060] The subject of this step can be the access device, such as the security unit of the access device. Generally speaking, it can be a security uni...
Embodiment 3
[0074] Such as image 3 As shown, the embodiment of the present invention provides a method for platform integrity verification, and the mobile communication network in which the access device is an H(e)NB (Home Base Station) is used as a specific scenario for illustration. The H(e)NB is installed with a logically independent The host device is the security chip of the H(e)NB, which can provide a safe and reliable environment for software execution and sensitive data storage, such as TrE or TPM. The method can include:
[0075] S302. The H(e)NB requests the network side to access the network;
[0076] In this step, in addition to the access request, it may also be a service access request, such as a request for a certain application layer service with a high level of security trust, such as online transactions, electronic banking, and the like.
[0077] S304. The security gateway on the network side issues an integrity verification policy to the H(e)NB, indicating which comp...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More